Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/323830343a333365633a3a2f33322d3332203d3e20323635343235.roa
File:                     323830343a333365633a3a2f33322d3332203d3e20323635343235.roa (raw, json)
Hash identifier:          NwZDv+QQM8b2WkaSLAzsb5e3tpYPOPJWTqR4tFHYSj4=
Subject key identifier:   AD:3B:62:A7:28:BD:F7:A8:88:3F:9F:A1:50:C2:14:4D:EC:EF:3A:84
Certificate issuer:       /CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
Certificate serial:       64C123C5417CFFFB6145F42D0C25CDA08BB488CB
Authority key identifier: 0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/323830343a333365633a3a2f33322d3332203d3e20323635343235.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     265425
IP address blocks:        2804:33ec::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl
                          rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 02:07:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:c1:23:c5:41:7c:ff:fb:61:45:f4:2d:0c:25:cd:a0:8b:b4:88:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=AD3B62A728BDF7A8883F9FA150C2144DECEF3A84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:14:e8:70:55:e7:26:54:89:20:1f:34:e4:d2:
                    f9:bc:22:d0:55:20:e4:f2:1b:a7:0b:11:b9:40:58:
                    18:85:69:af:2c:42:9e:a3:15:54:13:e1:6d:c9:64:
                    a3:48:22:ef:ea:72:cb:d0:30:d9:44:ae:b0:e3:8f:
                    85:10:a7:8b:47:ca:44:ab:ec:09:36:89:c4:26:d3:
                    00:e9:99:35:7c:2e:56:08:9d:58:a0:81:6e:52:63:
                    40:7a:fd:e5:b0:ff:e6:05:12:42:83:ca:40:26:88:
                    69:69:4e:c4:34:d7:bd:68:c6:b7:0c:68:69:1d:20:
                    37:b1:62:7e:1f:5e:fc:74:d4:cb:a1:73:f6:9b:e5:
                    72:d6:42:bd:4f:ad:00:31:5a:5d:7a:f7:9a:8b:64:
                    1d:3c:c8:4f:47:e5:fc:a8:9b:6b:99:39:d1:cc:02:
                    55:f1:03:a6:76:e8:88:bc:cb:fa:b8:78:a6:43:95:
                    cb:ce:d3:d7:53:f1:58:fe:d6:97:b1:6f:7e:4d:7d:
                    51:34:1e:72:96:12:67:d2:e2:3b:13:44:b8:c9:0e:
                    9c:36:f8:96:ac:12:84:32:36:03:c5:83:04:a9:6a:
                    4b:05:30:cb:1f:32:be:55:d9:cb:d1:0c:c8:a4:69:
                    9d:31:7c:40:47:f8:93:da:29:4a:57:fa:ab:c6:4b:
                    10:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:3B:62:A7:28:BD:F7:A8:88:3F:9F:A1:50:C2:14:4D:EC:EF:3A:84
            X509v3 Authority Key Identifier:
                keyid:0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/323830343a333365633a3a2f33322d3332203d3e20323635343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:58:4f:9a:21:be:57:72:7c:57:6f:c9:15:94:2c:a7:db:7b:
         bc:e8:a3:5b:ba:ae:ca:75:46:9c:77:2d:79:62:2a:69:65:e5:
         6d:0b:60:17:cf:f5:f6:b5:86:3a:18:97:25:ca:fb:70:fb:d1:
         11:0e:6d:57:13:27:51:2a:11:92:ba:29:94:7f:02:30:c3:57:
         fa:ae:4b:53:5b:47:1d:6f:ae:9a:8e:0d:21:46:2b:89:b9:f6:
         2b:b1:d8:e4:5e:2b:0c:dd:d9:6b:70:dd:14:fe:b3:ec:0d:1a:
         01:73:07:e0:65:c0:3d:9a:43:8b:e6:8a:63:3e:ce:48:c0:f1:
         49:80:a3:1b:8c:93:c3:87:8d:10:bb:bf:1c:ea:4a:02:75:3d:
         5d:56:20:ff:7d:11:1c:24:9e:24:6d:07:08:a6:a8:46:65:24:
         87:1a:a3:96:8f:26:24:15:06:2f:fd:72:02:fc:8b:30:68:90:
         e3:7f:e6:83:48:24:36:06:af:74:f8:ca:87:10:b0:a8:07:8e:
         13:b8:59:30:8f:2f:43:9d:a5:5d:8d:6b:21:c9:e3:ad:b9:2d:
         80:51:3c:c1:81:4a:d2:f8:c2:d8:07:54:2e:86:0b:8f:25:8e:
         70:55:dc:13:03:56:66:48:19:0d:ba:66:d8:ce:a3:7b:1a:ab:
         fb:6d:2f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:42:11 2025 by rpki-client